Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JpgyTswQ-FhnDCoL67R56vPhT1Y.roa
File: JpgyTswQ-FhnDCoL67R56vPhT1Y.roa (raw, json)
Hash identifier: HStVlHFhMvJOZECxN/vHVbbxgbNfWvNorTYoxxZW/Qo=
Subject key identifier: 26:98:32:4E:CC:10:F8:58:67:0C:2A:0B:EB:B4:79:EA:F3:E1:4F:56
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019764E28B047E1BEA68A97CF0F01CF639FD
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JpgyTswQ-FhnDCoL67R56vPhT1Y.roa
Signing time: Thu 12 Jun 2025 16:04:17 +0000
ROA not before: Thu 12 Jun 2025 16:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:197:64e2:7a54/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 12 Jun 2025 16:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:e2:8b:04:7e:1b:ea:68:a9:7c:f0:f0:1c:f6:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Jun 12 16:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2698324ecc10f858670c2a0bebb479eaf3e14f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:7c:42:1b:26:bc:36:92:d5:67:cc:46:1b:
e7:a3:1b:dc:64:f6:2e:1f:d6:8a:b5:9e:b4:9d:76:
0d:79:ce:b2:20:11:a6:30:ea:1b:2d:31:55:c6:28:
76:4d:41:0d:15:2b:9a:81:66:5c:3e:de:89:32:4e:
23:f4:16:d9:61:94:83:f7:c2:6d:06:dc:e8:ba:c7:
7c:c0:1e:7d:89:df:39:8c:93:d2:bd:99:91:b0:68:
47:d8:c3:99:58:81:58:3e:76:16:a4:7d:4f:a3:10:
31:28:11:77:de:1d:ea:4c:3f:99:91:f5:55:24:a4:
19:af:08:64:50:79:c8:38:0a:5e:a0:f7:6f:4a:4a:
00:fa:f1:a4:a0:6b:ea:fc:6c:40:1c:41:53:b0:d3:
a9:10:9f:a7:44:0d:f1:81:1c:09:9c:8d:0d:c5:d2:
f8:a3:2d:d8:69:8f:bb:37:89:48:b2:6f:8a:d4:77:
e5:a8:65:d0:61:f8:ff:a9:d0:40:c1:da:cf:62:29:
0d:9a:bd:fa:8d:e7:fe:96:85:1d:1b:a3:b2:9e:81:
cc:9a:7f:26:39:d9:b4:38:be:5c:6a:96:34:8d:0e:
79:47:5c:77:0e:e1:d7:e0:b6:61:57:92:1d:90:fd:
fb:8e:ad:34:27:aa:6d:3a:29:b4:38:1a:c1:a1:90:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:32:4E:CC:10:F8:58:67:0C:2A:0B:EB:B4:79:EA:F3:E1:4F:56
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/JpgyTswQ-FhnDCoL67R56vPhT1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:197:64e2:7a54/128
Signature Algorithm: sha256WithRSAEncryption
05:93:41:97:6c:c7:21:34:55:1b:57:b2:2b:73:e7:72:8d:87:
c6:b9:79:de:b4:e8:9f:e7:0d:17:f3:ae:6c:09:76:03:50:a2:
19:70:88:66:13:3d:5e:bf:0a:c8:bb:73:38:84:ec:71:98:11:
a6:dd:6f:33:b0:5d:9a:31:f2:3d:ad:27:5f:c2:3b:fb:79:75:
54:6b:de:d5:56:4a:e7:90:85:0f:08:8c:99:d3:66:bb:72:f8:
fb:e1:5f:f0:2e:bb:0d:0c:36:df:e1:c8:57:bd:12:4b:7c:33:
3f:60:50:50:ac:bd:5c:74:68:15:3b:52:98:cb:19:b4:65:5d:
61:28:43:b8:82:ee:a4:49:1f:dc:84:68:38:b6:84:df:a0:c2:
e5:c3:fe:79:10:b1:77:e9:56:fb:78:31:80:5a:e7:b5:98:ed:
90:8d:7b:50:e7:85:3f:ae:80:a2:70:a6:2c:2a:86:14:4a:27:
84:fe:39:40:4f:0e:2f:d0:07:bd:d0:88:2d:87:91:50:c8:01:
0f:7d:be:31:fc:55:24:95:77:e1:10:1f:ce:c0:cb:86:12:12:
94:3b:3e:2c:65:7a:f0:e8:b1:fa:4c:e6:25:39:6b:0c:12:0a:
10:49:1b:8c:31:08:ea:51:83:de:74:4f:ec:f1:02:46:06:37:
2f:c1:1d:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:26:48 2025 by rpki-client